Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File: 1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier: Cs66v00VkCkOVSr8tGd0mFtwLPQTahGZZw/ziEInvf4=
Subject key identifier: 8F:A1:3A:A2:06:AC:0C:AE:48:7F:08:49:88:45:D3:83:5A:85:51:28
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer: /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial: 019D7C346546AC3B78CB11A8A8CFBDEAAFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number: 1B
Signing time: Sat 11 Apr 2026 11:01:41 +0000
Manifest this update: Sat 11 Apr 2026 11:01:41 +0000
Manifest next update: Sun 12 Apr 2026 11:01:41 +0000
Files and hashes: 1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: 2PB5+afWzmr2kImqzzXdrVht20B2HSAFs+k8lUSrT5E=)
2: _rBdv8MR9CvtKpBAk1ya2EZx1BU.asa (hash: 15bX9d3Zxz011uBisah//kOmw3F4olKW35kry5sNKSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 04:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7c:34:65:46:ac:3b:78:cb:11:a8:a8:cf:bd:ea:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
Validity
Not Before: Apr 11 11:01:41 2026 GMT
Not After : Apr 12 11:01:41 2026 GMT
Subject: CN=8fa13aa206ac0cae487f08498845d3835a855128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:e8:56:9b:03:8a:6c:16:9e:40:cb:1f:10:
12:e9:7a:a8:47:93:5b:df:0f:cf:fe:bd:9d:ba:fe:
cb:cd:56:7d:df:e5:b1:97:68:ab:ec:ca:d8:89:b0:
5c:23:08:3f:3f:2c:90:a1:dc:d0:a7:26:86:bc:f8:
6c:e6:78:47:be:59:23:4b:a3:2f:e6:80:22:d1:38:
e2:b0:f0:c8:bf:dc:84:f3:51:40:97:00:be:28:21:
8d:68:14:44:b5:93:f8:f6:10:65:1f:84:5f:63:2b:
ae:7d:19:bc:ba:15:75:88:f9:4e:9a:80:6b:64:c5:
7f:b8:c3:d1:bb:99:b4:26:c0:3a:5a:92:01:c9:72:
6d:99:11:e1:fa:62:e6:54:90:a3:d3:27:00:6c:37:
03:d2:25:3d:7b:38:36:3e:85:4c:0e:0a:52:1f:79:
ef:ba:58:4b:24:6d:d5:31:ed:2f:38:81:f4:0c:d3:
9f:41:4c:75:c8:72:d5:29:0a:c3:fb:eb:c2:b8:18:
9e:1d:ec:20:0e:21:0c:82:fd:be:da:29:dd:31:1b:
71:0f:be:98:df:16:c5:5f:3d:ea:66:a9:7b:d4:af:
dd:7a:c1:d1:e9:db:0e:9a:33:28:b9:ea:0b:ef:f0:
ba:33:45:81:0e:1f:a0:07:b0:18:8a:4a:e9:bd:3d:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:3A:A2:06:AC:0C:AE:48:7F:08:49:88:45:D3:83:5A:85:51:28
X509v3 Authority Key Identifier:
keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:41:de:5a:6d:3d:70:40:54:ee:5f:cc:03:1f:a6:6e:67:
b0:56:bd:3a:76:8e:e2:96:03:1f:48:00:42:06:ed:33:45:d9:
81:2e:f5:8f:7e:94:dd:b5:d3:fc:2c:9e:1d:72:49:50:c9:06:
dc:e5:8a:ac:5f:e8:76:cd:98:0b:77:a7:77:5d:42:05:dd:52:
59:e8:65:2d:10:10:59:7b:ed:4a:f8:f6:73:89:0c:c6:27:b4:
2e:49:db:2e:9a:0f:96:2b:c5:53:37:04:c0:99:8e:15:5a:dd:
04:9e:d3:ed:0f:56:83:55:b0:15:b2:d7:e3:f1:e9:1b:ef:cf:
f6:b0:84:a2:2c:b5:49:3f:cb:0a:93:c4:83:d1:48:ae:f4:86:
62:5c:8a:11:e1:5b:f5:34:e6:0b:b4:dc:2b:d4:70:ed:64:3c:
5c:01:63:0e:2f:b4:e7:67:8d:f3:de:9e:7a:29:f1:8b:d2:9e:
7a:0f:74:3e:f7:3d:ea:f6:34:96:59:cf:96:4b:fd:1d:75:8d:
99:1f:46:1a:19:4c:d8:7c:49:2b:87:d0:83:61:45:6c:08:3a:
be:68:f7:74:46:ff:c9:e4:d3:91:63:58:c6:88:e7:80:40:b7:
20:33:e7:d4:96:08:99:c8:c0:19:3e:31:ee:94:c0:66:24:fe:
f7:ba:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 13:14:58 2026 by rpki-client